Rendered content is the final visual form of an email or webpage after HTML is processed by a client and displayed to the user. It is what people actually see on the screen, not the raw source code, hidden markup, or separate objects inside the message. In email, rendering can turn tables, spacing, fonts, and colors into a layout that looks very different from the underlying message structure.
This matters in cyber security because attackers can hide intent in the rendering layer. A phishing lure may appear as a QR code, warning banner, or login prompt only after the email is displayed, while security tools that inspect raw MIME parts, attachments, or extracted images may miss it. Defenders therefore need controls that analyze both the original message and the rendered output, especially for HTML email, OCR pipelines, and QR-aware scanning. Treating rendered content as part of the inspection surface helps close a gap attackers can use for social engineering and credential theft.